Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-nPPrFa1ZNy1kYytZPyauiQGU0.cer
File:                     m-nPPrFa1ZNy1kYytZPyauiQGU0.cer (raw, json)
Hash identifier:          mjdCuavel3FtLPe/9urTwOw3CHO4ArfbfkZ6c1WoI0U=
Subject key identifier:   9B:E9:CF:3E:B1:5A:D5:93:72:D6:46:32:B5:93:F2:6A:E8:90:19:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0D5AC4E277B74A30AA166B022C234
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/1b32ae-3c59-4b3d-9197-f3be848fde15/1/m-nPPrFa1ZNy1kYytZPyauiQGU0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/1b32ae-3c59-4b3d-9197-f3be848fde15/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:06 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.44.249.0/24

Validation:               Failed, certificate revoked on Fri 25 Aug 2023 08:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:d5:ac:4e:27:7b:74:a3:0a:a1:66:b0:22:c2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9be9cf3eb15ad59372d64632b593f26ae890194d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:16:5d:28:d7:90:84:04:f7:73:66:6b:9d:5b:
                    e4:7e:1f:d0:e0:8e:26:be:91:53:18:1a:b1:8f:db:
                    cc:89:7f:90:17:55:03:a5:65:ee:ee:75:32:fa:69:
                    b3:be:05:16:15:0c:63:e8:39:09:0e:a3:f4:eb:b6:
                    68:31:18:56:0e:0b:27:1a:de:d0:50:83:6e:c0:2a:
                    35:56:f5:ac:f9:38:b2:52:ca:d9:b7:3a:d5:b5:f0:
                    dd:08:dd:58:88:19:ad:d0:f1:6c:14:28:a9:92:6f:
                    77:a2:16:57:3a:30:9a:a4:bf:57:08:c7:45:05:04:
                    46:c6:55:bd:2d:f2:f7:4f:b6:ef:39:e6:fd:b9:8f:
                    72:f8:a0:b9:1e:6f:97:06:66:53:b1:b8:8e:f9:93:
                    97:7f:4b:c1:9f:1b:f6:0c:31:3f:54:3a:46:04:0c:
                    b0:a8:c8:ad:ab:1a:f4:aa:a9:95:a1:79:f5:a8:3a:
                    8a:ac:53:a7:63:0c:61:ef:04:9b:df:c1:f8:a2:23:
                    0d:fd:41:7b:17:c5:9b:c4:92:16:5f:dd:9f:23:33:
                    80:2d:48:41:72:86:db:2a:e3:cf:bd:04:80:24:13:
                    b6:a1:a5:da:de:f1:8b:a9:41:8f:31:69:f4:0d:05:
                    09:82:c7:68:4b:b6:12:89:2f:3b:b6:a3:96:b7:50:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:CF:3E:B1:5A:D5:93:72:D6:46:32:B5:93:F2:6A:E8:90:19:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1b32ae-3c59-4b3d-9197-f3be848fde15/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1b32ae-3c59-4b3d-9197-f3be848fde15/1/m-nPPrFa1ZNy1kYytZPyauiQGU0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.44.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:19:74:b5:35:d9:9b:46:30:fa:fd:c5:ef:4a:14:71:f5:f2:
         68:6b:7e:01:08:7c:ef:e5:e0:70:8a:d5:16:30:29:e2:3a:c5:
         77:e5:82:79:6c:6f:33:f6:5c:44:84:d6:b4:0a:70:3a:34:20:
         18:9e:02:41:29:23:e2:55:d2:5b:0e:61:b4:f8:90:45:b3:d6:
         ee:d2:df:26:df:1d:66:78:6b:1a:a0:5e:35:5c:46:c5:42:3a:
         66:42:e4:ac:85:0a:ea:8f:e8:37:d7:80:ea:e1:e7:c7:11:65:
         87:7f:3c:83:58:2c:08:31:c2:5a:e0:fb:7c:c5:e3:0d:94:32:
         ed:12:f2:d8:c5:c1:4f:14:c8:93:62:75:61:bc:61:e5:e3:4b:
         1c:ed:28:e3:49:3f:cc:35:57:83:8d:f9:fb:2b:10:a2:15:d2:
         e6:db:e3:ba:de:af:df:d3:1b:4e:9f:e0:53:f7:dd:6c:82:3f:
         03:76:89:f2:ec:df:34:ec:11:27:ab:84:38:4d:7b:c4:8a:2a:
         94:c6:bc:09:e1:b7:68:b0:57:50:50:72:76:be:3f:a1:25:3c:
         a0:4a:fc:d7:2c:a5:df:7e:a9:f9:07:4e:1b:9d:4b:5e:e1:24:
         f8:ee:15:6c:bc:d1:1b:29:a0:24:cf:c8:7e:9b:f1:af:53:15:
         52:de:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----